PT-2024-5871 · Unknown +1 · Ruby On Rails +1

🗓️ 24 Feb 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 15 Views

XSS vulnerability in Ruby on Rails translation helpers prior to versions 7.1.3.1 and 7.0.8.1 occurs.

Reporter	Title	Published	Views	Family All 497
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Mar 202315:19	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Ruby on Rails affects IBM License Metric Tool v9.	15 Apr 202503:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Software Support mobile app is vulnerable to multiple vulnerabilities due to 3rd party software	27 Feb 202519:51	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Ruby on Rails affects IBM License Metric Tool v9 (CVE-2024-26144).	19 Mar 202413:39	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.9 addresses multiple security vulnerabilities.	18 Jul 202313:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to expose sensitive information due to RubyGems activesupport ( CVE-2023-38037 )	27 Sep 202417:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	20 Jun 202400:38	–	ibm
Tenable Nessus	actionmailer Ruby Library 3.x < 6.1.7.9 / 7.0.x < 7.0.8.5 / 7.1.x < 7.1.4.1 / 7.2.x < 7.2.1.1 DoS (CVE-2024-47889)	18 Oct 202400:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: libdb-cxx / libdb-cxx-debuginfo / libdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_5498)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: libdb-cxx / libdb-cxx-debuginfo / libdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_6818)	1 Oct 202600:00	–	nessus

Source	Link
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26143.yml
github	www.github.com/rails/rails/security/advisories/GHSA-9822-6m93-xqf4
github	www.github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc
github	www.github.com/rails/rails/commit/5187a9ef51980ad1b8e81945ebe0462d28f84f9e
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:14067-1
osv	www.osv.dev/vulnerability/GHSA-9822-6m93-xqf4
osv	www.osv.dev/vulnerability/openSUSE-SU-2025:15124-1
bdu	www.bdu.fstec.ru/vul/2024-06653
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2024-26143
osv	www.osv.dev/vulnerability/CVE-2024-26143

17 May 2025 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.3 - 6.4

CVSS 3.17.5 - 9.8

CVSS 35.5

CVSS 48.7

EPSS0.02278

SSVC